
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
File: ngYAPFcVh0_asOMVcigO-OTkeYw.mft (raw, json)
Hash identifier: tsYZBN53qRuHeeIAR8GTEzpLaiDETxnJqZhumOoGHvM=
Subject key identifier: 3D:7A:15:6B:48:BA:BA:A4:E0:7E:FE:3F:9E:24:69:51:6E:3F:CE:44
Authority key identifier: 9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
Certificate issuer: /CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Certificate serial: 01A0CCA2BB6A47875FB0712AB7D2D99B8BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
Manifest number: 3B
Signing time: Wed 23 Sep 2026 05:00:11 +0000
Manifest this update: Wed 23 Sep 2026 05:00:11 +0000
Manifest next update: Thu 24 Sep 2026 05:00:11 +0000
Files and hashes: 1: H4A0XaCoNz3xdxbu_BQvhonTrLg.asa (hash: SUZN+kpPo9X4uP4hRZXEB9Klwbg5G07yYkGjoku+ID4=)
2: U40woe4t5L3G0u-LTfcj5cxfaU8.roa (hash: gDcGs3cvNtDcrQmnu+d2LGcZqFkPSX7n6H8BVd1x9QM=)
3: ccEx9SOUx4m-tHjhTok2nkxXIt8.roa (hash: hHnnV4OUqt3+HNEP/62ZeDafUCLIXf+qqG6fUJLUQ/o=)
4: ngYAPFcVh0_asOMVcigO-OTkeYw.crl (hash: ykkiYe1gSenha5tHTguPYujkHVWFashQwlK1hUAaHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:bb:6a:47:87:5f:b0:71:2a:b7:d2:d9:9b:8b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Validity
Not Before: Sep 23 05:00:11 2026 GMT
Not After : Sep 24 05:00:11 2026 GMT
Subject: CN=3d7a156b48babaa4e07efe3f9e2469516e3fce44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:75:86:e4:3f:01:b3:d7:79:23:2f:97:cd:
df:51:84:55:c9:1a:2c:15:1d:89:b9:cd:50:67:49:
42:74:94:cf:d9:f6:12:0f:79:4f:c2:68:a4:0d:c6:
f4:30:77:69:33:b7:33:4c:e9:44:d5:48:be:c5:bd:
68:c4:a2:4e:f7:43:b9:2d:c4:27:17:96:9a:03:1b:
93:83:18:2a:54:17:f4:da:da:7f:72:ef:02:e7:3f:
23:44:21:fc:f2:c2:2f:ec:e7:19:19:2a:1e:c7:a3:
0c:21:38:60:86:9b:cd:7c:43:7c:66:ed:b3:20:f0:
0c:67:60:95:b9:07:58:fe:61:05:58:38:22:5e:bb:
94:14:97:4f:c9:45:2b:67:e8:55:0a:49:dc:b5:88:
fd:2d:19:a3:c5:91:0e:9b:1a:5d:64:13:a9:6c:00:
c6:f3:c9:ed:b6:ce:55:9b:c7:77:08:1f:88:3f:94:
8a:66:88:6a:e3:06:49:59:45:60:9d:46:41:78:89:
49:2b:d7:41:7a:16:75:0b:17:21:08:aa:f5:9f:ac:
f0:3b:1b:90:70:03:4e:22:3c:a9:62:dd:79:db:27:
0b:33:20:ec:35:f1:b0:17:e9:57:24:d8:5e:14:df:
5e:a3:47:99:aa:a0:09:24:74:de:3e:7f:ae:33:d2:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:15:6B:48:BA:BA:A4:E0:7E:FE:3F:9E:24:69:51:6E:3F:CE:44
X509v3 Authority Key Identifier:
keyid:9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:62:03:4d:c2:90:44:88:e7:bf:8c:71:5f:b2:c7:88:ed:d4:
af:5a:97:12:74:e5:68:e0:3d:da:7d:22:d6:72:7b:4d:4d:da:
c6:3e:c0:e6:28:32:04:fb:3f:3b:ca:6a:1a:bf:17:71:fa:0d:
ee:e8:b1:22:94:1b:f5:cc:a4:cd:55:1d:08:3c:a6:00:e4:7c:
ec:b7:25:96:a0:b7:7e:34:8e:12:37:82:3d:29:62:1b:77:22:
4d:d2:0c:0f:d2:3a:94:36:cc:96:67:86:72:a0:e0:1a:aa:e6:
a8:14:bc:dc:45:b5:28:c2:af:9d:72:4d:14:f1:9b:28:9c:a6:
8b:ba:07:05:dd:12:74:9e:ab:ed:fc:ad:96:71:85:89:0a:ff:
49:8e:eb:31:fb:74:39:83:26:34:fe:65:45:7e:4b:99:86:76:
f1:f8:5d:cc:59:c6:b0:3d:ec:56:e4:03:13:8d:df:f4:ae:2f:
c3:78:ee:12:84:a0:e3:f4:1d:85:15:93:8d:1a:18:e8:ca:91:
27:08:65:87:f1:5e:a6:cd:d7:bb:ab:14:ac:55:67:66:8e:42:
78:e9:82:2e:97:75:ef:d4:c6:0f:f1:ea:80:b0:21:75:94:6f:
42:6a:72:fe:35:fd:c9:19:ee:8d:4a:ce:d6:4c:f2:80:7c:2a:
99:04:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:36:23 2026 by rpki-client